> You can't verify the OS You can. Look at seL4. This is an area of ongoing research. > you can't verify the network connection between your apps In what sen

> You can't verify the OS You can. Look at seL4. This is an area of ongoing research. > you can't verify the network connection between your apps In what sense? You can verify the crypto, and the networking stack. > you can't account for poor business requirements that result in formally verified hackable code Not sure what you're saying here. Are you referring to the possibility that the formal specification might not be adequate to guarantee security, even discounting side-channel attacks?